Notifications

Clear all

Ransomware Attack in Hospital

Emyliana · 2017-05-25T17:28:27Z

Hi, I have got some trouble in my workplace right now and the IT department also is investigating to solve this issues. I am one of the medical record officers at one of the private hospital in my country. The ransomware encrypts the data of several patient records on hospital computers, and only in exchange with 100 bitcoins the attackers decrypt the data again. This is critical for hospitals due to there are deal with very sensitive patient data. Therefore, I would like to ask the solution on 1.how to trace the evidence of ransomware? 2. Where to get the evidence and information about the sender? 3. Is it we can trace with the IP address? 4.How to decrypt the data without exchange of bitcoin from the attacker? 5.What is the prevention steps can be applied towards this ransomware attack? I hope a response from all of you regarding this issues and maybe with your ideas/comments and solution can solve my cases. Thank you.

Page 3 / 3 Prev

General (Technical, Procedural, Software, Hardware etc.)

Last Post by jaclaz 8 years ago

23 Posts

10 Users

0 Reactions

2,298 Views

RSS

mobileforensicswales

(@mobileforensicswales)

Reputable Member

Joined: 17 years ago

Posts: 274

01/06/2017 10:04 pm

Fair enough, thank you. Didn't have time to read it fully I'm sorry

ReplyQuote

kacos

(@kacos)

Trusted Member

Joined: 10 years ago

Posts: 93

03/06/2017 1:18 pm

WannaCry Coding Mistakes Can Help Files Recovery Even After Infection
https://thehackernews.com/2017/06/wannacry-ransomware-unlock-files.html

ReplyQuote

jaclaz

(@jaclaz)

Illustrious Member

Joined: 18 years ago

Posts: 5133

03/06/2017 3:04 pm

WannaCry Coding Mistakes Can Help Files Recovery Even After Infection
https://thehackernews.com/2017/06/wannacry-ransomware-unlock-files.html

Still, this applies
https://www.forensicfocus.com/Forums/viewtopic/p=6588718/#6588718

I doubt that the "good possibility" the researchers apodictically stated reflects actual "good possibility", surely you will be able to get a file here and there but not much more than that.

jaclaz

ReplyQuote

Page 3 / 3 Prev

8 Forums
15.7 K Topics
92.3 K Posts
263 Online
41.1 K Members

Forum Icons: Forum contains no unread posts Forum contains unread posts

Topic Icons: Not Replied Replied Active Hot Sticky Unapproved Solved Private Closed